Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.cer
File:                     8A6A024CE45904C9FB14F46F0F2725A783643C0A.cer (raw, json)
Hash identifier:          gj8ODwGmPO+uY3w4pgSfiYgyvQG+8Vs+VwmBnhGpefA=
Subject key identifier:   8A:6A:02:4C:E4:59:04:C9:FB:14:F4:6F:0F:27:25:A7:83:64:3C:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       765058E5E5DE80A9CCE96E4B43955325667A6E0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 00:25:09 +0000
Certificate not after:    Tue 04 Mar 2025 00:30:09 +0000
Subordinate resources:    AS: 271367
                          IP: 200.36.216.0/22
                          IP: 2804:7a60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:50:58:e5:e5:de:80:a9:cc:e9:6e:4b:43:95:53:25:66:7a:6e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  5 00:25:09 2024 GMT
            Not After : Mar  4 00:30:09 2025 GMT
        Subject: CN=8A6A024CE45904C9FB14F46F0F2725A783643C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d8:ba:b6:66:39:db:34:8c:16:7d:68:78:84:
                    7d:ae:0c:42:6b:56:75:80:0f:18:b3:25:cb:98:0a:
                    b9:08:59:39:2a:64:58:f1:c9:03:7c:0b:58:6f:21:
                    90:2b:b2:14:1b:d9:ea:e8:96:a4:9a:1e:73:41:2d:
                    ae:1d:94:0c:9c:05:29:86:b0:d9:bf:cb:46:f3:58:
                    b3:af:4a:35:ec:d6:b8:35:c6:25:c8:f1:7a:5b:86:
                    c1:e5:f3:15:36:64:7f:c3:46:c6:19:bd:5b:00:54:
                    23:86:66:eb:c4:c3:0b:15:5a:74:66:4e:c8:63:c1:
                    e3:74:4a:b3:b6:c0:8c:77:db:ff:02:e5:a9:6a:e6:
                    a5:ba:cf:b3:a2:d0:13:77:e3:dc:8c:dd:bb:e5:9e:
                    13:8b:43:24:92:8a:05:a6:7b:32:3f:ea:14:e1:da:
                    40:ad:93:c6:9b:0a:b2:28:33:3a:f5:0b:c2:85:bc:
                    91:6d:b2:01:96:c6:7f:b9:2d:fa:8d:85:9c:71:d5:
                    2e:ad:a3:6a:9d:fd:9a:3f:8b:f2:80:a5:5f:09:85:
                    83:4b:76:9e:92:9c:71:1d:7b:96:30:32:3b:bd:48:
                    d1:9b:de:62:aa:52:cc:12:d5:24:2f:53:e2:8e:8e:
                    c4:bf:ea:0d:1a:ee:c2:00:8d:54:08:63:46:c2:f6:
                    38:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:6A:02:4C:E4:59:04:C9:FB:14:F4:6F:0F:27:25:A7:83:64:3C:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.216.0/22
                IPv6:
                  2804:7a60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271367

    Signature Algorithm: sha256WithRSAEncryption
         7c:7f:c2:08:41:3a:67:a2:02:0c:2d:30:4e:b1:69:97:db:51:
         d4:1f:cc:9a:ce:59:7d:97:cf:35:c4:5b:5a:de:f8:e6:e5:24:
         a8:5d:ab:04:03:65:aa:d9:ee:03:b1:7c:06:25:e1:2c:95:6e:
         c9:59:e5:91:12:b0:80:24:96:a6:6d:8a:60:0b:76:09:10:16:
         58:9f:e9:79:67:e7:4c:69:e3:bf:a8:e4:a4:b1:7b:40:ca:69:
         8d:52:ac:82:22:26:b0:b8:53:1a:ff:51:ca:c0:cb:a0:b4:f5:
         da:16:69:c2:0e:6c:7a:80:bd:08:d2:56:25:ed:bc:f2:4b:71:
         ec:11:ac:4b:60:1e:e2:b9:a7:29:e7:aa:4a:cc:a1:3d:d9:1a:
         6b:ba:12:1e:7c:04:3b:cc:29:9c:e3:ac:99:2b:fe:f7:68:95:
         65:bf:7c:37:90:6b:6c:a4:9c:54:3e:43:f7:c0:af:67:d1:9c:
         8c:c4:19:d6:14:0a:35:47:90:42:3a:86:ba:4f:01:f5:a7:70:
         53:c0:18:19:1f:b7:c1:d0:2e:b8:27:ee:a6:e0:7f:9d:53:49:
         59:fe:ae:f7:42:36:cd:b1:19:ee:59:31:d8:ab:da:f2:1c:f2:
         19:d8:a5:f6:7c:db:83:92:9a:98:db:7a:92:ff:2b:cb:9a:78:
         3f:23:30:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org